Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
a29bf8db1e52cc826e10fe4ed25173b8be99cbc7636fb6424c533cb5febcfe87.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
a29bf8db1e52cc826e10fe4ed25173b8be99cbc7636fb6424c533cb5febcfe87.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
a29bf8db1e52cc826e10fe4ed25173b8be99cbc7636fb6424c533cb5febcfe87.elf
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
a29bf8db1e52cc826e10fe4ed25173b8be99cbc7636fb6424c533cb5febcfe87.elf
Resource
debian9-mipsel-20240226-en
General
-
Target
6dc88988619b5c887bd8490c399bd88a.bin
-
Size
44KB
-
MD5
bd6c496688a42b30421fc33f4ba1e013
-
SHA1
5531dacde93eea6dc7f67cae1a120dfc00a3b745
-
SHA256
2ae7e54e8aaca5bef44ba4bddc5e89def2425a5bcc421710f653ccfab0b31a71
-
SHA512
d17366e6d24961311694d3904e4fdfe769a107fa41ae74f2fd8eb80c673a1f2d9d08ffafeb0777129f027eb8bb90aa1188ac2d1f01ac5b3b1d78377ef9bb5fd0
-
SSDEEP
768:j5SqZkQxDD3oo2uIm35MMFwZG8KCCtrf9QeCnL5tx5kuBnYYdED5h6iP:jsqueD4NuZMYITKCCu/xXBYphlP
Malware Config
Extracted
gafgyt
93.123.85.119:23
Signatures
-
Detected Gafgyt variant 1 IoCs
resource yara_rule static1/unpack001/a29bf8db1e52cc826e10fe4ed25173b8be99cbc7636fb6424c533cb5febcfe87.elf family_gafgyt -
Gafgyt family
Files
-
6dc88988619b5c887bd8490c399bd88a.bin.zip
Password: infected
-
a29bf8db1e52cc826e10fe4ed25173b8be99cbc7636fb6424c533cb5febcfe87.elf.elf linux